Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,673 published records · 15 KEV · 3,673 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,673 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1654.5%
High96026%
Med1,12231%
Low1203.3%
None10.03%
Legacy00.00%
Unscored1,30536%

Matching records by UTC month

Feb 253,673

Signal coverage

KEV-listed: 15
With a forecast: 3,673
Unknown date: 0
Unscored severity: 1,305

Share of cohort: KEV 0.41% · forecast 100% · unscored 36%.

Showing 281–300 of 3,673By severity band: Critical · 9.0–10.0 165, High · 7.0–8.9 960, Medium · 4.0–6.9 1,122, Low · 0.1–3.9 120, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,305

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21715

net: davicom: fix UAF in dm9000_drv_remove

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is netdev private data and it cannot be used after free_netdev() call. Using dm after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function. This is similar to the is…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:26.174Z. Updated 2026-05-23T15:56:59.143Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:56 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21714

RDMA/mlx5: Fix implicit ODP use after free

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr. Without this change, we could try to invalidate this mr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 281 to 300 of 3673.First page Next page

Published 2025-02-27T02:07:25.570Z. Updated 2026-10-21T12:35:55.119Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:35 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21713

powerpc/pseries/iommu: Don't unset window if it was never set

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: Don't unset window if it was never set On pSeries, when user attempts to use the same vfio container used by different iommu group, the spapr_tce_set_window() returns -EPERM and the subsequent cleanup leads to the below crash. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:24.950Z. Updated 2026-05-11T21:04:58.043Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:04 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21712

md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime After commit ec6bb299c7c3 ("md/md-bitmap: add 'sync_size' into struct md_bitmap_stats"), following panic is reported: Oops: general protection fault, probably for non-canonical addres…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:24.354Z. Updated 2026-10-15T21:51:52.411Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:51 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21711

net/rose: prevent integer overflows in rose_setsockopt()

In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rose_setsockopt() In case of possible unpredictably large arguments passed to rose_setsockopt() and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum and fix these is…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:23.746Z. Updated 2026-10-15T01:03:34.288Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:03 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21710

tcp: correct handling of extreme memory squeeze

In the Linux kernel, the following vulnerability has been resolved: tcp: correct handling of extreme memory squeeze Testing with iperf3 using the "pasta" protocol splicer has revealed a problem in the way tcp handles window advertising in extreme memory squeeze situations. Under memory pressure, a socket endpoint ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:23.112Z. Updated 2026-08-05T11:53:49.495Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:53 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21709

kernel: be more careful about dup_mmap() failures and uprobe registering

In the Linux kernel, the following vulnerability has been resolved: kernel: be more careful about dup_mmap() failures and uprobe registering If a memory allocation fails during dup_mmap(), the maple tree can be left in an unsafe state for other iterators besides the exit path. All the locks are dropped before the ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:22.452Z. Updated 2026-10-15T21:51:52.263Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:51 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21708

net: usb: rtl8150: enable basic endpoint checking

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking Syzkaller reports [1] encountering a common issue of utilizing a wrong usb endpoint type during URB submitting stage. This, in turn, triggers a warning shown below. For now, enable simple endpoint ch…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:21.814Z. Updated 2026-10-15T01:03:33.071Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:03 WIB

Official record

CritPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21707

mptcp: consolidate suboption status

In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsing is not enough to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:21.084Z. Updated 2026-10-15T01:03:31.840Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:03 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21706

mptcp: pm: only set fullmesh for subflow endp

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is possible to change the 'fullmesh' flag. The code in mptcp_pm_nl_fullmesh() expects to change it only on 'subflow' endpoints, to recreate more or less subflows using …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:20.458Z. Updated 2026-10-15T01:03:30.084Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:03 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2025-21705

mptcp: handle fastopen disconnect correctly

In the Linux kernel, the following vulnerability has been resolved: mptcp: handle fastopen disconnect correctly Syzbot was able to trigger a data stream corruption: WARNING: CPU: 0 PID: 9846 at net/mptcp/protocol.c:1024 __mptcp_clean_una+0xddb/0xff0 net/mptcp/protocol.c:1024 Modules linked in: CPU: 0 UID: 0 PI…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:19.764Z. Updated 2026-10-15T01:03:28.351Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:03 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-58000

io_uring: prevent reg-wait speculations

In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent reg-wait speculations With *ENTER_EXT_ARG_REG instead of passing a user pointer with arguments for the waiting loop the user can specify an offset into a pre-mapped region of memory, in which case the [offset, offset + sizeof(io_uri…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:19.155Z. Updated 2026-05-11T21:01:51.644Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:01 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57999

powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW Power Hypervisor can possibily allocate MMIO window intersecting with Dynamic DMA Window (DDW) range, which is over 32-bit addressing. These MMIO pages needs to be marked as reserved s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:18.570Z. Updated 2026-10-21T12:35:48.145Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:35 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57998

OPP: add index check to assert to avoid buffer overflow in _read_freq()

In the Linux kernel, the following vulnerability has been resolved: OPP: add index check to assert to avoid buffer overflow in _read_freq() Pass the freq index to the assert function to make sure we do not read a freq out of the opp->rates[] table when called from the indexed variants: dev_pm_opp_find_freq_exact_inde…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:17.965Z. Updated 2026-08-05T11:47:18.059Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:47 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57997

wifi: wcn36xx: fix channel survey memory allocation size

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn->chan_survey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn->chan_survey, ensuring proper initialization …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:17.371Z. Updated 2026-08-05T11:47:16.997Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:47 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57996

net_sched: sch_sfq: don't allow 1 packet limit

In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does not work correctly with a limit of 1. iproute2 actually checks for this and this patch adds the check in kernel as well. This fixes the following syzkaller reported crash…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:16.765Z. Updated 2026-10-15T01:01:15.910Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:01 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57995

wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() In ath12k_mac_assign_vif_to_vdev(), if arvif is created on a different radio, it gets deleted from that radio through a call to ath12k_mac_unassign_link_vif(). This action f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:16.163Z. Updated 2026-08-05T11:47:14.855Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:47 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57994

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

In the Linux kernel, the following vulnerability has been resolved: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() Jakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page() to increase test coverage. syzbot found a splat caused by hard irq blocking in ptr_ring_resize_multiple() …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:15.568Z. Updated 2026-05-11T21:01:44.767Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:01 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57993

HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check syzbot has found a type mismatch between a USB pipe and the transfer endpoint, which is triggered by the hid-thrustmaster driver[1]. There is a number of similar, alrea…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:14.953Z. Updated 2026-10-15T01:01:14.386Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:01 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57992

wifi: wilc1000: unregister wiphy only if it has been registered

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: unregister wiphy only if it has been registered There is a specific error path in probe functions in wilc drivers (both sdio and spi) which can lead to kernel panic, as this one for example when using SPI: Unable to handle kernel pag…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:14.278Z. Updated 2026-05-11T21:01:42.482Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:01 WIB

Official record